Admin Count

adminCount Indicates that a given object has had its ACLs changed to a more secure value by the system because it was a member of one of the administrative groups (directly or transitively).

This will get you all user objects with the adminCount attribute set to 1:

nxc ldap <TARGET> -u adm -p <PASSWORD> --admin-count

If you want all objects in ldap you can query them manually:

nxc ldap <TARGET> -u adm -p <PASSWORD> --query "(adminCount=1)" "sAMAccountName"